Epolicy Orchestrator Epo (Mcafee) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2018-06-15. Vendor: Mcafee.

CVEs of Epolicy Orchestrator Epo

• CVE-2018-6672 - CVSS 6.5 (medium), 2018-06-15: Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view…
• CVE-2018-6671 - CVSS 6.5 (medium), 2018-06-15: Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users…
• CVE-2017-3936 - CVSS 9.8 (critical), 2018-06-13: OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary…
• CVE-2018-6659 - CVSS 5.4 (medium), 2018-04-02: Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit…
• CVE-2018-6660 - CVSS 6.2 (medium), 2018-04-02: Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data…
• CVE-2017-3980 - CVSS 7.2 (high), 2017-05-18: A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated…